Privacy Policy

2. Information we collect

We only process the information you actively provide, plus the minimum technical data needed to run the website securely:

• Contact form: name, company (optional), email address, phone (optional), and your message.
• Email correspondence: the content and metadata of messages you send us.
• Server logs: IP address, timestamp, requested URL and user agent — used only to prevent abuse and diagnose errors, then automatically deleted after 14 days.

We use no tracking cookies, no analytics tools (Google Analytics, Plausible, etc.), and no advertising pixels. The contact form uses a hidden honeypot field for bot defense, which collects no personal data.

3. How we use your information

• To respond to your inquiry and prepare a proposal or engagement.
• To deliver our services under an active contract.
• To secure and operate this website — our legitimate business interest.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

4. Where data is stored & how long

Our website and all inquiries are hosted on secure servers in Switzerland and the European Union, under strong data-protection standards. Data is transmitted over encrypted connections at all times.

• Contact inquiries: 24 months, then deleted (unless a contract requires longer retention).
• Server logs: 14 days.
• Contract and billing records: retained as required by applicable law.

5. Service providers

We work with the following providers, each under a data-processing agreement:

• Hosting: a data center in Switzerland / the EU (identity available on request).
• Email delivery (SMTP): a European provider on EU-based servers.

We will send you a complete list of service providers by email on request.

6. Your rights

You have the right to:

• Know what personal information we hold about you and request access to it;
• Correct inaccurate or complete incomplete information;
• Request deletion of your information;
• Restrict or object to processing;
• Request a portable copy of your information;
• Withdraw consent you have given.

California residents (CCPA/CPRA): you have the right to know, delete, and correct your personal information, and to opt out of its sale or sharing. We do not sell or share personal information, and we will not discriminate against you for exercising your rights.

To exercise any of these rights, email hello@klyotech.com. We respond within 30 days.

7. Security

All traffic is transmitted over TLS 1.3. The contact form is rate-limited (5 requests / 10 minutes / IP). Access to inquiry data is restricted to our technical team under multi-factor authentication.

8. Changes to this policy

We may update this policy when the law or our services change. The current version is always available here; the date below shows when it was last revised.